GROUPAMA / 2020 UNIVERSAL REGISTRATION DOCUMENT

4 CORPORATE SOCIAL RESPONSIBILITY (CSR) Declaration of Extra-financial Performance

in 2020, Centaurecontinuedthe partnershipwith BMWMotorrad ❯ to provide motorcyclists with one-day training to improve their everyday riding. This nationwideoffering is unique in France. The trust and quality of our partner testify to Centaure’sambitionand ability to innovate for years to come in this new area. Performance indicator ❯ Rate of people (internal and external) made aware of prevention actions: awarenessactions were carried out with 56,767 peoplein 2020 (94,083 in 2019), representinga rate of 200% relative to the Group workforce. The health crisis has had a major impact on the preventiveactions usuallydeployed.All actions that could be performedremotelywere maintained, making it possible to reach 60% of the number of people who underwentawarenessefforts in 2019 despite the crisis situation. Centaure indicator (driving centres dedicated to prevention) ❯ Number of trainees in the Centaure road accident prevention centres in 2020: 22,894 (38,115 in 2019). The decrease is significant compared with 2019 due to the impact of the health crisis: closure of the centres with each lockdown and much more limited employeetravel for training. In addition, the healthmeasures applied to protect traineesand our employeeslimited the admission capacity by reducing the size of groups. The issue of policyholder data protection (e) Is a key element of trust – and thereforepotential loss of trust if the risk materialises.The societal context is expandingon this subject, with increasing requests to “exercise personal rights” and the growing litigiousness of relations. Cyber risk (attacks on the Group’s informationsystems),one of the most serious emerging risks in the sector, is addressedas part of the Group’s Major Risks framework. Regarding the risk of non-compliantdata processing: the Group’s Code of Conduct specifies that the companies must ensure that any collectedand processedpersonal informationdoes not infringe privacy or individual freedoms, in accordancewith the regulations. The companies are also committed to respecting the rights of the data subjects and taking all necessary measures to protect their confidentiality. Since the GDPR (2) came into force on 2 May 2018, the Group Data Protection Correspondent(CIL) has given way to the France DPO (Data Privacy Officer), who also takes over the duties of the Group CPO (Corporate Privacy Officer). In anticipation of the entry into force of the regulation,the Group appointeda GroupCPO in 2016. The interest in this designation lies mainly in the introduction of management and coordination of “Personal Data” governance at the Group level by capitalisingon the framework for governanceof personal data implementedin Franceby the CIL (FranceDPO), thus reducing the risks. Each international subsidiary has also designated a DPO with its national supervisory authority.

Preventionhas taken shape over time throughmultiple individual or collective, innovative or original actions seeking to reinforce the safety of individuals and property on all of their private and professional risks. The deploymentof preventionactions conforms to a strategy specific to the Group, a source of expertise and legitimacy: integrationof dedicated resources (teams of prevention inspectors, Centaure centres, etc.), partnerships of excellence (Predict, Météo France, the Prévention Routière road safety association, national police force, highway companies, etc.), and local actions thanks to exceptional coverage of the territory. For example, for many years, the Group has worked with its partners to provide the “Dix de conduite jeunes” and “Dix de conduite rurale” safe driving training. The “Groupama,ma préventionmétéo” app has been extended to beneficiariesregisteredon the “Groupama,toujours là” app, as part of the extension of the Groupama-Predict service to individuals, professionals, and businesses for several regional mutuals. The Predict prevention service for local authorities includes support in preparing operational risk management documents required by prefectures, such as the Local Response Plan (PCS) and 24/7 expert support for anticipated risk information. Local authorities benefit froma dedicatedWeb 4 space, combinedwith personalised warnings at the municipality level. Thanks to these adaptive solutions, numerous safety measures are initiated each year. The Group is developing – and will increasinglydevelop – prevention services in connection with the growth of connected objects (particularly through auto, home, health, with young people, seniors, professionals including farmers, businesses, etc.). Our preventionactionsgroup together five major areas: health, road safety, home risks, agricultural prevention, and industrial risks and local authorities. Content on prevention is regularly posted on the social networks, Twitter accounts, or Facebook pages of the various entities of the Group. Closer look at the Centaure centres (12 centres dedicated to road safety, of which Groupama is an equal shareholder with the motorway companies and the Caisse des Dépôts): opening of a twelfth Centaure centre in the Paris region in 2020; ❯ Centaure with Preventis Card Pro is recognised by the ❯ governmentapplicationdedicatedto the CPF (1) . This application, managedby Caissedes Dépôts, allows the 30 millionemployees to register directly with their personal training account for certificate-issuing training courses eligible for the CPF. This training course is the only one among the thousands of certificate-issuing courses devoted to road safety, apart from driving licences; trainees’ vehicles undergo a 10-point safety check with driver ❯ involvement as part of instructional efforts;

Personal Training Account. (1) General Data Protection Regulation. (2)

82 Universal Registration Document 2020 - GROUPAMA ASSURANCES MUTUELLES